University of Wisconsin Hospitals and Clinics Authority

The covered entity (CE), University of Wisconsin Hospitals and Clinics Authority, reported that an employee was the target of an email phishing scheme affecting the protected health information (PHI) of 85,902 individuals. The PHI involved included names, dates of birth, addresses, and diagnoses/conditions. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE implemented additional administrative, technical, and security safeguards and retrained staff on the requirement to protect and secure PHI.